| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-32755 | 4.0 | Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for | 2021-07-16 15:15:00 | 2021-07-13 21:15:00 |
| CVE-2016-5804 | 5.0 | Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a | 2021-07-16 15:08:00 | 2016-07-15 16:59:00 |
| CVE-2021-33213 | 4.0 | An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address. | 2021-07-16 14:18:00 | 2021-07-14 14:15:00 |
| CVE-2021-20748 | 5.0 | Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in t | 2021-07-16 14:17:00 | 2021-07-14 02:15:00 |
| CVE-2021-33211 | 4.0 | A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives. | 2021-07-16 14:14:00 | 2021-07-14 14:15:00 |
| CVE-2021-33212 | 3.5 | A Cross-site scripting (XSS) vulnerability in the "View in Browser" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SVG image. | 2021-07-16 14:07:00 | 2021-07-14 14:15:00 |
| CVE-2021-0604 | 1.9 | In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interac | 2021-07-16 13:57:00 | 2021-07-14 14:15:00 |
| CVE-2014-3452 | 4.3 | Filters\LAV\avfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .jpg file. | 2021-07-16 13:48:00 | 2014-05-16 15:55:00 |
| CVE-2015-7853 | 7.5 | The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value. | 2021-07-16 13:15:00 | 2017-08-07 20:29:00 |
| CVE-2016-4953 | 5.0 | ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time. | 2021-07-16 13:15:00 | 2016-07-05 01:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: